* snooped elements expire with the TTL of the DNS answer,
clamped to 60..entry_ttl; entry_ttl is now the ceiling, polled elements still use it
* write cache tracks the expiry it last wrote per element and rewrites
when the new expiry moves by at least half of the answer's lifetime, in either direction
* a flow's route is decided on its first packet and kept on the conntrack entry:
route statements set ct mark, one restore rule per policy marks later packets
of the original direction, settled flows skip the lookups
* LuCI: change the entry_ttl option text
* update the README
Co-authored-by: Claude <redacted> Signed-off-by: Dirk Brenken <redacted>